What is GHSA-59h8-hqv9-9m63?

GHSA-59h8-hqv9-9m63 is a security advisory published by GitHub Security Advisories with unknown severity. The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity...

Which CVE IDs does GHSA-59h8-hqv9-9m63 cover?

GHSA-59h8-hqv9-9m63 covers the following CVE IDs: CVE-2026-105975. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-59h8-hqv9-9m63unknown

The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-105975 →

📋 Description

The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy genuine payment records, and write CamPay Shortcode Payment Gateway WordPress plugin before 1.7 meta onto arbitrary posts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-105975
https://wpscan.com/vulnerability/a5da90f5-563d-4397-b3bc-38bd1dc9aefb
https://github.com/advisories/GHSA-59h8-hqv9-9m63